- From: Rob Wu <notifications@github.com>
- Date: Mon, 28 Nov 2022 04:39:43 -0800
- To: whatwg/fetch <fetch@noreply.github.com>
- Cc: Subscribed <subscribed@noreply.github.com>
Received on Monday, 28 November 2022 12:39:56 UTC
That covers the initial request (including the minimal test case from my report in Firefox). In case of repeated redirects, the same-origin check (step 9 and step 13) and redirect chain construction (step 18) happen before the "main fetch" step: https://fetch.spec.whatwg.org/#http-redirect-fetch Consequently, despite the requests being always over https, some parts of the specified algorithm treat the request as http. -- Reply to this email directly or view it on GitHub: https://github.com/whatwg/fetch/issues/1551#issuecomment-1329006302 You are receiving this because you are subscribed to this thread. Message ID: <whatwg/fetch/issues/1551/1329006302@github.com>
Received on Monday, 28 November 2022 12:39:56 UTC